I built flutter_netwatch, a Chucker-style HTTP inspector for Flutter with sensitive data masking, cURL export, and zero navigator conflicts
After seeing how many teams share network logs that
accidentally expose auth tokens and passwords, I built
an HTTP inspector that actually thinks about security.
What makes it different from chucker_flutter and
chuck_interceptor:
🔒 Sensitive data masking toggle
Masks Authorization headers, passwords, tokens, CVV
fields automatically. Toggle it off in dev, keep it on
when sharing logs with QA. Safe to share screenshots.
📋 Copy as cURL
One tap generates a ready-to-paste cURL command from
any request. With or without masking. Paste straight
into terminal or Postman.
📤 Export options
Export as Postman Collection, plain text, or JSON.
Share with your backend team in one tap.
🔐 Security analysis per request
Each request gets analysed for: missing HSTS,
NSAllowsArbitraryLoads, sensitive data in URL params,
Basic auth usage, missing CSP.
🫧 Floating bubble
Optional draggable bubble that shows request count.
Tap to open inspector, long press for quick stats.
🔔 In-app notifications
Toast-style banner for every request — color coded
by status. Tap to jump straight to that request detail.
No flutter_local_notifications dependency.
Zero navigator conflicts
Does not require or conflict with your existing
navigatorKey. Works via its own Overlay — never
touches your navigation stack.
Auto-disabled in release builds.
Works with Dio, http, and Chopper.
Built with sealed classes throughout.
Would love feedback — especially from teams
working on banking or fintech apps where log
sharing is a real security concern.
Links in comments 👇